VDB
CVE-2017-6719
CVE-2017-6719
PUBLISHED
CVSS 6.699999809265137 MEDIUM
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges, aka Command Injection. More Information: CSCvb99406. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.1.28i.BASE 6.2.1.22i.BASE 6.1.32.8i.BASE 6.1.31.3i.BASE 6.1.3.10i.BASE.
EPSS 0.71% · 52.2th percentile
Risk Scores
CVSS 3.0
6.699999809265137
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.71%
52.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | ios_xr | 6.0.2, 6.0.2.01 |
| n/a | Cisco IOS XR | Cisco IOS XR |
Timeline
- Jun 21, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Oct 28, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Mar 4, 2022 EPSS Score
- May 6, 2022 EPSS Score
- May 17, 2022 CVE Updated
- Jul 8, 2022 EPSS Score
- Nov 13, 2022 EPSS Score
- Jan 15, 2023 EPSS Score